CERT24MAL-2026-18317 — Malicious code in @greenlake/context-pane (npm)Loading data…
CERT24Threat Observatory
Period

MAL-2026-18317 — Malicious code in @greenlake/context-pane (npm)

@greenlake/context-pane is an npm dependency-confusion package described as a compatibility shim and an “authorized dependency-confusion test.” Its versions 3.0.0 and 1.0.0 run beacon code during npm installation and package import, sending the hostname, installation path, and current working directory over plain HTTP to http://185.158.107.175:8787/_ah/dc.

← Back to intelligence

MAL-2026-18317 — Malicious code in @greenlake/context-pane (npm)

@greenlake/context-pane is an npm dependency-confusion package described as a compatibility shim and an “authorized dependency-confusion test.” Its versions 3.0.0 and 1.0.0 run beacon code during npm installation and package import, sending the hostname, installation path, and current working directory over plain HTTP to http://185.158.107.175:8787/_ah/dc.